Hugging Face's logo

SaylorTwift
/
gemini-cli

agent
coding-agent
cli
llm
tool-use
Model card Files
xet
 Community
gemini-cli / docs /changelogs /latest.md
SaylorTwift's picture
SaylorTwift HF Staff
Add files using upload-large-folder tool
7a1ad33 verified
preview code
|
Raw History Blame Contribute Delete
3.56 kB

Latest stable release: v0.60.0

Released: September 15, 2026

For most users, our latest stable release is the recommended release. Install the latest stable version with:

npm install -g @google/gemini-cli

Highlights

  • Extension Consent & Isolation: Introduced explicit prompting for user consent on environment changes requested by extensions, along with sanitization of runtime-altering environment variables to ensure secure execution environments.
  • Sandbox & Directory Hardening: Isolated the settings directory and temporary directories within sandbox containers, including specific path isolation enhancements for the macOS Seatbelt sandbox.
  • Robust Boundary & Path Resolution: Hardened workspace boundary validation, symlink resolution, and NTFS 8.3 short name (SFN) path mitigation across command safety and file discovery utilities.
  • Enhanced API & Connection Security: Implemented strict RFC 9207 issuer identification in the Model Context Protocol (MCP) OAuth flow, along with improved destination validation and connection routing inside web fetch utilities.

What's Changed

  • fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120
  • fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117
  • chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162
  • Changelog for v0.58.0 by @gemini-cli-robot in #29161
  • fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in #29171
  • feat(extensions): harden path resolution and boundary validation in extension loader by @diegogodinezr in #29169
  • Changelog for v0.59.0-preview.0 by @gemini-cli-robot in #29159
  • fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by @amelidev in #29158
  • fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables by @amelidev in #28863
  • fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery by @jesussamuel-byte in #29170
  • fix(config): enforce strict permission and ownership checks on system-wide configuration paths by @jesussamuel-byte in #29115
  • fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in #29116
  • fix(cli): isolate settings directory in sandbox containers by @jvargassanchez-dot in #29216
  • fix(core): enforce envelope metadata provenance for untrusted tool outputs by @luisfelipe-alt in #29215

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.59.0...v0.60.0